Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34302e302f32342d3234203d3e203634313533.roa
File:                     34352e36382e34302e302f32342d3234203d3e203634313533.roa (raw, json)
Hash identifier:          Ag/YO7dOXM3M4fxKmCoOlKgDLHvALtB6bHkyntWGOtY=
Subject key identifier:   F9:4D:B0:34:EE:47:69:E0:76:9E:4B:3B:B0:58:F1:D8:32:17:E6:1E
Certificate issuer:       /CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
Certificate serial:       2CA40D042E36453008D780F8999E11779653C3FE
Authority key identifier: CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34302e302f32342d3234203d3e203634313533.roa
Signing time:             Tue 09 Jul 2024 07:00:00 +0000
ROA not before:           Tue 09 Jul 2024 06:55:00 +0000
ROA not after:            Tue 08 Jul 2025 07:00:00 +0000
asID:                     64153
IP address blocks:        45.68.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:a4:0d:04:2e:36:45:30:08:d7:80:f8:99:9e:11:77:96:53:c3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CDC77A42763441C41428797EE5B764FBCD7AF57E
        Validity
            Not Before: Jul  9 06:55:00 2024 GMT
            Not After : Jul  8 07:00:00 2025 GMT
        Subject: CN=F94DB034EE4769E0769E4B3BB058F1D83217E61E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1c:62:ce:43:15:5e:cb:59:11:53:b6:aa:b9:
                    19:1e:d7:90:3c:53:2f:1b:34:3b:84:c4:9a:38:16:
                    98:7f:a0:9e:cb:f0:84:5c:7e:da:44:c7:b3:f5:2b:
                    fe:48:cf:c1:48:0c:94:22:b8:b4:f3:f7:24:fb:79:
                    e2:2f:75:c5:b2:ae:6c:b7:15:24:43:14:d2:a3:22:
                    0d:1b:5b:c9:d9:e2:53:a3:49:68:7e:76:68:18:f0:
                    77:17:56:4f:cf:32:86:a6:38:da:b5:56:6e:2e:35:
                    78:d4:14:42:45:69:4e:68:04:a4:6e:6a:39:2f:e4:
                    64:ab:3a:03:6a:30:d2:24:e8:e7:c3:e8:78:69:13:
                    0a:8d:26:85:2f:16:b1:ce:a6:a3:e3:e2:21:cb:73:
                    2a:6d:51:53:43:c3:9f:7a:7d:36:e0:f8:45:d1:a2:
                    b5:c3:c6:a9:a0:72:a4:25:0d:2b:8e:55:b2:6f:87:
                    65:7c:a9:4d:84:52:81:e1:1e:4a:dc:07:29:24:60:
                    65:88:2a:da:3e:a7:a1:67:e6:b1:77:6b:98:7b:b3:
                    cd:64:df:70:9a:97:dc:e5:41:0d:b2:4b:25:6f:7d:
                    e7:54:6c:1c:d3:30:f7:9b:8c:f1:f8:cd:63:6d:9f:
                    c6:88:2d:43:24:a5:a1:2d:7c:cc:78:11:7a:37:ed:
                    3d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4D:B0:34:EE:47:69:E0:76:9E:4B:3B:B0:58:F1:D8:32:17:E6:1E
            X509v3 Authority Key Identifier:
                keyid:CD:C7:7A:42:76:34:41:C4:14:28:79:7E:E5:B7:64:FB:CD:7A:F5:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CDC77A42763441C41428797EE5B764FBCD7AF57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E836823D6693BDB4357836FFB06AAAF827FA7A4A5AACA8B5F1FF56C9645F6D72/0/34352e36382e34302e302f32342d3234203d3e203634313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:a1:d4:57:fa:24:83:3c:02:26:7c:da:5f:7d:94:24:c6:b7:
         82:f0:7a:4a:24:3b:ee:0f:b8:f5:f2:0d:d2:50:33:a9:6f:b7:
         c0:9b:a3:0e:e3:73:3e:ba:00:9e:d4:fd:61:24:60:be:88:51:
         08:a3:5d:7e:91:df:e0:dc:dd:4b:52:aa:df:e6:12:e5:68:a9:
         0f:e9:a1:e2:3a:ee:ce:03:5a:32:a6:3b:fb:2a:9f:be:54:86:
         60:82:ea:c3:db:d2:d8:41:d0:1c:b7:18:c5:70:e5:27:b0:ee:
         fb:de:b4:61:9b:91:7c:7d:e9:25:a9:ac:13:03:f6:33:f9:23:
         e8:24:25:ec:1a:72:8f:f0:80:18:2d:58:d8:8f:85:7d:f9:24:
         38:8b:14:8a:b9:67:75:df:90:81:0b:33:b8:62:a7:18:b1:e6:
         d6:ac:e1:83:0b:17:2a:4d:cf:f1:06:e0:2b:90:ac:0c:a6:e3:
         45:c4:f4:84:cb:44:13:2b:6a:72:3a:21:95:9c:54:0e:de:68:
         47:ef:a7:71:61:1f:d9:1f:40:ea:55:0d:31:a5:28:54:e2:80:
         1d:66:93:05:3f:2e:90:a6:57:a0:96:5d:63:dc:b4:12:b3:d1:
         c8:9f:e9:54:d8:29:ed:7c:4a:cb:73:5d:eb:45:a4:7e:ed:b9:
         e6:54:a9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:34:18 2024 by rpki-client on console-fra.rpki-client.org